diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml index 4fdd7062..ff305f3f 100644 --- a/data/plugin_vulns.xml +++ b/data/plugin_vulns.xml @@ -11812,6 +11812,7 @@ User Domain Whitelist 1.4 - user-domain-whitelist.php domain_whitelist Parameter Stored XSS 104681 + 57490 XSS @@ -11819,6 +11820,7 @@ User Domain Whitelist 1.4 - user-domain-whitelist.php Domain Whitelisting Manipulation CSRF 104683 + 57490 CSRF 1.5 @@ -12143,8 +12145,9 @@ - Wordpress Plugin "wp-business-intelligence-lite" - Remote Code Execution Exploit + WP Business intelligence lite <= 1.0.6 - Remote Code Execution Exploit + 57590 http://packetstormsecurity.com/files/125927/ http://cxsecurity.com/issue/WLB-2014030243 @@ -12175,7 +12178,7 @@ - Jetpack 2.9.3: Critical Security Update + Jetpack 2.9.3 - Critical Security Update http://jetpack.me/2014/04/10/jetpack-security-update/ 2014-0173 @@ -12185,4 +12188,26 @@ + + + Lazyest Gallery <= 1.1.20 - EXIF Script Insertion Vulnerability + + 57746 + + XSS + 1.1.21 + + + + + + Post Expirator <= 2.1.1 - Cross-Site Request Forgery Vulnerability + + 57503 + + CSRF + 2.1.2 + + +